Treasury’s Tech Tangle: Chinese Hackers and the Great Cybersecurity Fumble
The United States Treasury Department was hit by a major cybersecurity incident linked to Chinese threat actors. They accessed computers and unclassified documents through a compromised key from BeyondTrust, a third-party service provider. The Treasury Department is working with the FBI and CISA to address the incident and secure their systems.
Hot Take:
Well, it seems the U.S. Treasury Department just got an unexpected audit by our ‘friends’ in China. Who knew cybersecurity breaches could be so taxing?
Key Points:
- The U.S. Treasury Department experienced a “major cybersecurity incident” involving suspected Chinese hackers.
- Attackers gained access through a compromised key from BeyondTrust, allowing them to remotely access some Treasury computers and documents.
- The Treasury is collaborating with CISA and the FBI, suspecting a Chinese state-sponsored APT group.
- BeyondTrust has identified security vulnerabilities in its products, with one already being actively exploited.
- The incident coincides with other attacks on U.S. telecom providers by a different Chinese threat group, Salt Typhoon.
Already a member? Log in here